Privacy Notice

How Medicus Clinic processes personal data as data controller.

This is an informational translation. If interpretation differs, the Turkish original prevails.

1. Data Controller

This privacy notice has been prepared by Medicus Clinic Özel Sağlık Hizmetleri ve Ticaret Ltd. Şti. (the “Clinic”) as data controller under Turkish Personal Data Protection Law No. 6698 (“KVKK”) and related legislation.

Address: Karabekir Cad. No.50 Side 07330 Manavgat Antalya Türkiye
Email: info@medicus.com.tr

Our clinic attaches great importance to protecting your personal data and takes technical and organisational measures for data security.

2. Collection Methods and Legal Grounds

Your personal data may be collected through clinic registration, healthcare delivery, payment and insurance processes, call-centre conversations, email, the website, mobile applications and similar channels, verbally, in writing, visually or electronically.

Under Articles 5 and 6 of the KVKK, the data are processed on one or more of these grounds:

  • Processing expressly provided for by law;
  • Processing directly related to the establishment or performance of a contract;
  • Compliance with the data controller’s legal obligations;
  • Protection of public health and the provision of medical diagnosis, treatment and care;
  • The data subject’s explicit consent.

3. Categories of Personal Data

  • Identity: name, surname, Turkish identity number, passport number, patient/protocol number and similar information.
  • Contact: telephone number, email and residential address.
  • Health: diagnoses, treatments, laboratory results, medicines, prescriptions, medical reports and doctors’ notes.
  • Financial: invoices, payments, insurance policies and coverage details.
  • Other: call records, vehicle registration plates and digital access records such as IP addresses, cookie data and logs.

4. Purposes of Processing

  • Protecting public health and providing medical diagnosis, treatment and care;
  • Planning and managing healthcare services and their financing;
  • Handling billing and insurance;
  • Meeting legal obligations;
  • Measuring patient satisfaction and improving service quality;
  • Information security, audit and risk management;
  • Corporate planning, reporting and analysis.

5. Recipients of Personal Data

Only for the purposes above and in accordance with applicable law, data may be transferred to:

  • the Ministry of Health, Social Security Institution, private insurers and assistance companies;
  • authorised public bodies, judicial authorities and legal representatives;
  • suppliers, laboratories and IT support providers;
  • where necessary, business partners abroad, only where explicit consent has been obtained.

Technical and organisational measures are taken to protect confidentiality during transfers.

6. Processing Without Explicit Consent

Under Articles 5(2) and 6(3) of the KVKK, processing may take place without explicit consent where expressly provided by law; necessary to protect the life or bodily integrity of someone unable to give consent; directly related to a contract; necessary to fulfil the controller’s legal obligations; the data have been made public by the data subject; necessary to establish, exercise or protect a right; or necessary for the controller’s legitimate interests, provided fundamental rights are not harmed.

Data concerning health and sexual life may be processed only by persons bound by confidentiality and for the protection of public health or the provision of medical services.

7. Data Security

Personal data are protected against unauthorised access, disclosure, alteration and destruction through the technical and organisational measures envisaged by Article 12 of the KVKK and the Data Security Communiqué.

8. Your Rights

Under Article 11 of the KVKK, you may ask whether your data are processed; request information about processing; learn the purpose and whether use is consistent with that purpose; request correction of incomplete or inaccurate data; request erasure or destruction where legal conditions are met; learn the third parties to whom data have been transferred; and claim compensation for damage caused by unlawful processing.

You may send your request in writing to Medicus Clinic Özel Sağlık Hizmetleri ve Tic. Ltd. Şti., Karabekir Cad. No.50 Side 07330 Manavgat Antalya Türkiye, or by email to info@medicus.com.tr.